CVEs-PoC/2020/CVE-2020-14057.md

CVE-2020-14057

Description

Monsta FTP 2.10.1 or below allows external control of paths used in filesystem operations. This allows attackers to read and write arbitrary local files, allowing an attacker to gain remote code execution in common deployments.

POC

Reference

• https://github.com/sbaresearch/advisories/tree/public/2019/SBA-ADV-20191203-01_Monsta_FTP_Arbitrary_File_Read_and_Write

Github

No PoCs found on GitHub currently.